The video is largely correct, but the purpose of those 50 authorizations is to generate 50 consecutive nonces. Ultimately, only one matches the wallet's real-time nonce, while the remaining 49 are discarded. The goal is to prevent Binance from preemptively intercepting transactions by increasing gas fees! Binance 14 is a high-frequency hot wallet with constant normal withdrawals, causing the nonce to change every second. From obtaining the signature to the transaction being packaged and added to the blockchain, there are network delays and queuing times, making it impossible for the attacker to accurately predict the final matching nonce. Therefore, a "spray/blind sniping" strategy is used: covering a continuous window (50 nonces) at once, betting that one of them will match the real-time value. Just one match is enough. Clearly, Binance's hot wallet private key was not leaked; the attacker simply used the server's legitimate signing script and the EIP-7702 protocol to authorize the hot wallet to a contract deployed by the attacker, thus giving this contract all the capabilities of the wallet.